Router 876 and IOS 12.3 (8) YI2

I am using SDM 2.2a. I want to use QoS but the SDM replies that i can't because of the IOS. Wich version of IOS Supports QoS on this router?

According to Feature Navigator, it takes the Advanced IP Services or Advanced Enterprise Services feature set to do QoS queuing on this router.
Feature Navigator
www.cisco.com/go/fn
Hope this helps.
Brandon

Similar Messages

Router platform and IOS version to support MPLS

I have few Cisco 2621 routers and one 3640 router, could I use these router to create a MPLS VPN lab? if so , what is the minimum IOS version required?
Thanks in advance.

The minimum hardware and software image tu support MPLS can be found at www.cisco.com/go/fn select search by feature and in the search box put MPLS (Multiprotocol Label Switching) there you can find the platform and IOS to support basic MPLS, but you need to consider the fact that supporting MPLS special features like AToM can only be supported on some 7200, 7500, 7600, 10000 and 12000, http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide_chapter09186a0080153e64.html#1030652

AirPlay broken after upgrade to iTunes 12 and iOS 8.1.3

Hi,
Upgraded to itunes 12 and iOS 8.1.3 and AirPlay has now broken. I have never had any issues before with AirPlay (in nearly two years.)
i can only get the AirPlay icon to appear in iphone 6 control centre if I reset my router (HH3). Icon disappears overnight however.
Icon is also missing completely from iTunes. This is permanent.
I have tried everything. factory reset my router, powered down all devices inc iPhone 6 (and reset all network settings) and repaired my power line adapters but I can't get AirPlay to work at all using my Pc.
Help!
THanks!

Ps I should clarify that I updated to iTunes 12.1

Router WebVPN and client certificate

Hello!
In my test lab I can't to make work my webvpn configuration =\
I have several components: MS AD, MS CS (but without NDES), router 2911 and client computer. Client and router have a certificate from MS CS. In my configuration I use authentication by certificate or aaa (LDAP) and authentication by aaa working good. But authentication by client certificate doesn't work. And my internal https services don't work also - "Invalid or no certificate", but this strange because I imported CA certificate for this.
Can you help me make it works?
My 2911 version:
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(3)T, RELEASE SOFTWARE (fc1)
My Config:
aaa authentication login webvpn group ldap local
ip local pool webvpn 192.168.200.1 192.168.200.254
bind authenticate root-dn cn=webvpn,ou=staff,dc=domain,dc=com password P@ssw0rd
webvpn gateway vpn
ip address <ip address> port 4443
ssl trustpoint root-ca
inservice
webvpn install svc flash0:/webvpn/anyconnect-dart-win-2.5.3055-k9.pkg sequence 1
webvpn context employee
ssl authenticate verify all
login-message "VPN Portal"
policy group policy1
   url-list "inside"
   functions svc-enabled
   filter tunnel VPN-SPLIT
   svc address-pool "webvpn" netmask 255.255.255.0
   svc default-domain "domain.com"
   svc keep-client-installed
   svc split dns "domain.com"
   svc split include 192.168.0.0 255.255.0.0
   svc dns-server primary 192.168.1.1
   svc dns-server secondary 192.168.1.2
   citrix enabled
virtual-template 1
default-group-policy policy1
aaa authentication list webvpn
gateway vpn
authentication certificate
username-prefill
ca trustpoint root-ca
user-profile location flash0:/userprof
inservice
crypto pki trustpoint root-ca
enrollment terminal
revocation-check none
rsakeypair root-ca
I imported certificate from pkcs12 with CA certificate.
From my debug (this is happend then i try to access to my webvpn portal and I choose my certificate from MS CS for access)
Jun 5 11:22:39: WV: validated_tp : cert_username : matched_ctx :
Jun 5 11:22:39: WV: failed to get sslvpn appinfo from opssl
Jun 5 11:22:39: WV: failed to get sslvpn appinfo from opssl
Jun 5 11:22:39: WV: Error: No certificate validated for the client
Can anybody explain me why it doesn't work?

Hi,
did you find any solution for this? As I am in it seems the same situation now.
I am testing it with Cisco 2911 - IOS version 151-3.T4 and last anyconnect client for Android (Samsung Galaxy S III mobile)
Thanx for any advice/help
Pavel

HT1695 I have the 1st generation iPad. All of a sudden it will not connect to my wi-fi. It finds my wi-fi, but will not totally connect. I have done everything...reset network, rebooted router etc and it still will not connect. Any suggestions?

I have the 1st generation iPad. All of a sudden it will not connect to my wi-fi. It finds my wi-fi, but will not totally connect. I have done everything...reset network, rebooted router etc and it still will not connect. My other divices are connected....iPhone and 3 Macs. Any suggestions?

Some things to try first:
1. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
2. Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
3. Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
4. Go into your router security settings and change from WEP to WPA with AES.
5. Renew IP Address: (especially if you are droping internet connection)
    •    Launch Settings app
    •    Tap on Wi-Fi
    •    Tap on the blue arrow of the Wi-Fi network that you connect to from the list
    •    In the window that opens, tap on the Renew Lease button
6. Potential Quick Fixes When Your iPad Won’t Connect to Your Wifi Network
http://ipadinsight.com/ipad-tips-tricks/potential-quick-fixes-when-your-ipad-won t-connect-to-your-wifi-network/
~~~~~~~~~~~~~~~~~~~~~~~~~
iOS 6 Wifi Problems/Fixes
Wi-Fi Fix for iOS 6
https://discussions.apple.com/thread/4823738?tstart=240
How To: Workaround iPad Wi-Fi Issues
http://www.theipadfan.com/workaround-ipad-wifi-issues/
Another Fix For iOS 6 WiFi Problems
http://tabletcrunch.com/2012/10/27/fix-ios-6-wifi-problems-ssid/
Wifi Doesn't Connect After Waking From Sleep - Sometimes increasing screen brightness prevents the failure to reconnect after waking from sleep. According to Apple, “If brightness is at lowest level, increase it by moving the slider to the right and set auto brightness to off.”
Fix For iOS 6 WiFi Problems?
http://tabletcrunch.com/2012/09/27/fix-ios-6-wifi-problems/
Did iOS 6 Screw Your Wi-Fi? Here’s How to Fix It
http://gizmodo.com/5944761/does-ios-6-have-a-wi+fi-bug
How To Fix Wi-Fi Connectivity Issue After Upgrading To iOS 6
http://www.iphonehacks.com/2012/09/fix-wi-fi-connectivity-issue-after-upgrading- to-ios-6.html
iOS 6 iPad 3 wi-fi "connection fix" for netgear router
http://www.youtube.com/watch?v=XsWS4ha-dn0
Apple's iOS 6 Wi-Fi problems
http://www.zdnet.com/apples-ios-6-wi-fi-problems-linger-on-7000004799/
~~~~~~~~~~~~~~~~~~~~~~~
How to Boost Your Wi-Fi Signal
http://ipad.about.com/od/iPad_Troubleshooting/a/How-To-Boost-Your-Wi-Fi-Signal.h tm
Troubleshooting a Weak Wi-Fi Signal
http://ipad.about.com/od/iPad_Troubleshooting/a/Troubleshooting-A-Weak-Wi-Fi-Sig nal.htm
How to Fix a Poor Wi-Fi Signal on Your iPad
http://ipad.about.com/od/iPad_Troubleshooting/a/How-To-Fix-A-Poor-Wi-Fi-Signal-O n-Your-iPad.htm
iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
iPad: Issues connecting to Wi-Fi networks http://support.apple.com/kb/ts3304
WiFi Connecting/Troubleshooting http://www.apple.com/support/ipad/wifi/
How to Fix: My iPad Won't Connect to WiFi
http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-My-Ipad-Wont-Connect -To-Wi-Fi.htm
iOS: Connecting to the Internet http://support.apple.com/kb/HT1695
iOS: Recommended settings for Wi-Fi routers and access points http://support.apple.com/kb/HT4199
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
Connect iPad to Wi-Fi (with troubleshooting info)
http://thehowto.wikidot.com/wifi-connect-ipad
Fix iPad Wifi Connection and Signal Issues http://www.youtube.com/watch?v=uwWtIG5jUxE
Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
How To Fix iPhone, iPad, iPod Touch Wi-Fi Connectivity Issue http://tinyurl.com/7nvxbmz
Unable to Connect After iOS Update - saw this solution on another post.
https://discussions.apple.com/thread/4010130
Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
Wi-Fi or Bluetooth settings grayed out or dim
http://support.apple.com/kb/TS1559
~~~~~~~~~~~~~~~
If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
 Cheers, Tom

After 11.1 and ios 7 update, cannot log into ipad. says apple ID already in use. no issues prior to updates.

After 11.1 and ios 7 update, cannot log into ipad. says apple ID already in use. no issues prior to updates.tried both primary and backup emails. says both already in use

randers4, thank you for the suggestions.
1) I have contacted Verizon and they are not blocking "premium" or 3rd party text messages.
2) The Apple ID login issue occurs regardless of wi-fi network location, or even if I am not on wi-fi at all. Router settings are irrelevant to this problem.
3) I have already played around extensively with date and time settings. This did not fix any issues.
Any other suggestions? I had another call with Apple support and they are of the opinion that I may need to have the phone totally replaced, which is unacceptable unless it is free of charge.

TS1398 I can't find my wifi name or signal or any other wifi spots and I'm right next to my wifi router box and my iPod isn't detecting my wifi router box I'm my house

I can't find my wifi name or signal or any other wifi spots and I'm right nepxt to my wifi router box and my iPod isn't detecting my wifi router box I'm my house

If not:
iOS: Wi-Fi or Bluetooth settings grayed out or dim
One user reported that placing the iPod in the freezer fixed the problem.
If not successful, an appointment at the Genius Bar of an Apple store is usually in order.
Apple Retail Store - Genius Bar
Then
Does the iPod connect to/see other networks? (you were not clear)
Does the iPod see the network?
Any error messages?
Do other devices now connect?
Did the iPod connect before?
Try the following to rule out a software problem:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Power off and then back on the router
- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections
- Wi-Fi: Unable to connect to an 802.11n Wi-Fi network
- iOS: Recommended settings for Wi-Fi routers and access points
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.
If still problem make an appointment at the Genius Bar of an Apple store since it appears you have a hardware problem.
Apple Retail Store - Genius Bar

Bose soundlink air speakers and iOS 7

I have just bought Bose sound link Air speakers, which seem to link fine with an old iPhone and iPad not yet updated to iOS 7 but not with my newer iPhone 5s or my iPad Air, both on iOS7. I can't find anything in settings to turn on or off. Any advice?

1. Turn off router, speaker and iPad
2. Turn on router and wait 30 seconds
3. Turn on Bose speaker and wait 30 seconds
4. Turn on iPad and test speakers
Note: You need to swipe up from bottom of screen to activate Control Center; the AirPlay icon should be in there.

TS4085 I reboot my router updated to IOS 5, still NO on/off selection for mirroring..please help getting disappointed

I reboot my router updated to IOS 5, still NO on/off selection for mirroring..please help getting disappointed

What are you trying to mirror from? Mirroring from your Mac won't be available until Mountain Lion 10.8 www.apple.com/macosx/mountain-lion/
Setting up and troubleshooting AirPlay Mirroring
support.apple.com/kb/TS4085

OSX and iOS bug breaks SSL

This type of massive security lapse by Apple does make me question why I've been going to all the hassle and expense of running an OSX, SSL only, family email server for the last few years.
http://www.crowdstrike.com/blog/details-about-apple-ssl-vulnerability-and-ios-70 6-patch/index.html
http://www.theregister.co.uk/2014/02/21/apple_patches_ios_ssl_vulnerability/
IOS update available but no OSX update yet.
https://support.apple.com/kb/HT6147

Here is a simple shell script that will automate this for you. Copy the conent into a file named wififixer.sh (as an example). The from a terminal window you can run it as:
$ sh wififixer.sh
The code:
#!/bin/sh
# This code is being released to Public Domain.
# THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
# ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
# SUCH DAMAGE.
# The purpose of this program script is to find the default gateway
# and continuously ping it every 15 seconds, in order to workaround
# Apple's BUG in their Wifi (AES) framework/driver, where Wifi
# connectivity is lost without continuous packet exchange.
# This BUG has been persistent in iOS 6 onward. It was also introduced
# with release of MacOS Mavericks 10.9.x.
# Reference: https://discussions.apple.com/message/24119041#24119041
# Find out IPv4 default gateway in route table.
gw=`netstat -rnfinet | grep default | awk '{print $2}'`
# If not found in route table, print message and exit.
test -z "${gw}" && echo "No (default) Gateway found." && exit 1
# ping the gateway every 15 seconds
ping -i 15 ${gw}

"permit tcp any any established" and IOS Firewall

Guys, I need some clarification here. I have already asked couple TAC guys but they either did not know the answer right away or they wanted to send me to another team who might answer it...
I have a single router. One LAN, one WAN. It is an 800 series router and IOS Firewall feature is turned on as follows:
ip inspect name IOS_Firewall tcp
ip inspect name IOS_Firewall udp
ip inspect name IOS_Firewall icmp
interface FastEthernet4
ip address dhcp
ip access-group 161 in
ip nat outside
ip inspect IOS_Firewall out
ip virtual-reassembly
duplex auto
speed auto
no cdp enable
crypto map mymap
access-list 161 permit udp any any eq ntp
access-list 161 permit udp any any eq bootpc
access-list 161 permit tcp any any established
access-list 161 permit icmp any any
access-list 161 permit esp any any
access-list 161 permit gre any any
access-list 161 permit udp any any eq isakmp
access-list 161 permit udp any any eq non500-isakmp
access-list 161 permit udp any eq non500-isakmp any
access-list 161 permit udp any eq isakmp any
access-list 161 permit udp any eq domain any
access-list 161 permit tcp any any eq telnet
access-list 161 permit tcp any any eq 1723
access-list 161 permit tcp any any eq 4500
access-list 161 permit tcp any any eq 5000
access-list 161 permit tcp any any eq 5500
access-list 161 deny ip any any log
My question is, is the statement "access-list 161 permit tcp any any established" required since I already have the IOS Firewall feature turned on?
Thank you

No you do not need it with CBAC's TCP inspection enabled.

With my iPhone 3GS and iOS 6 no problem a home with my WLAN. But now with my new iPhone 5 and iOS 6 no access to my WLAN at home. What can I do?

With my old iPhone 3GS and iOS 6 no problem a home with my WLAN. But now with my brand new iPhone 5 and iOS 6 no access to my WLAN at home. What can I do?

check to see if there is a firmware update for your router. There are also lots of troubleshooting steps you can take in this article
http://support.apple.com/kb/TS1398

IOS-XR and IOS MSDP Peer --- One way SA exchange

Hi.
I am running MSDP peering between IOS 7200 and IOS-XR.
I noticed there's one way SA exchange only.
When IOS-XR router sends SAs, I can receive it in 7200.
But when 7200 sends SA, it does not reflect in IOS-XR.
Need help the soones guys...
thanks in advance.

The router did not seem to like it when I tried to log the ACL:
MyRouter(config)#ip access-list extended SDM_IP
MyRouter(config-ext-nacl)# remark CCP_ACL Category=1
MyRouter(config-ext-nacl)# permit icmp any any log
class-map SDM_IP : access-list with 'log' not supported, pls remove 'log' from access-list otherwise class-map SDM_IP will not work properly
MyRouter(config-ext-nacl)# permit udp any any log
class-map SDM_IP : access-list with 'log' not supported, pls remove 'log' from access-list otherwise class-map SDM_IP will not work properly
MyRouter(config-ext-nacl)# permit tcp any any log
class-map SDM_IP : access-list with 'log' not supported, pls remove 'log' from access-list otherwise class-map SDM_IP will not work properly
MyRouter(config-ext-nacl)# permit ip any any log
class-map SDM_IP : access-list with 'log' not supported, pls remove 'log' from access-list otherwise class-map SDM_IP will not work properly
So I let it go through and it did not appear to hit the ACL either:
MyRouter#sho ip access-list | b SDM_IP
Extended IP access list SDM_IP
    10 permit icmp any any log
    20 permit udp any any log
    30 permit tcp any any log
    40 permit ip any any log
I have since took the logging part off since it didn't seem to have an effect.

Interworking between WCCP and IOS firewall on ISR and ASR routers?

I ran into a problem last year when running WAAS WCCP and IOS firewall IP inspection on the same 3945 router. They couldn't function at the same time. Cisco indicated that router IOS firewall and WCCP were compatible only when IOS zone-based policy configuration was used. Back then I was using IOS 15.1(1)T1 on the 3945 router and WAAS was version 4.2.3.
I now have some sites with 2921, 3945, and ASR1002 routers that need to be both IOS firewall and WCCP for WAAS. Now with newer IOS releases, does the IOS firewall estill have to be zone-based policy configuration? Because classic classic IOS firewall is easier to configure for WAAS, just "ip inspection waas enable" command, I'd prefer the easier configuration.
What about ASR1002 router IOS firewall with WCCP? I have never implemented that before. I was trying to find some deployment examples or configuration guides from Cisco, but was not able to.
Thanks for any help.
Gary

I'm assuming you placed service group 61 and 62 on the router LAN, WAN inbound directions. Did you apply inspection to LAN to WAN direction or WAN to LAN direction?
Did you also used WCCP and IOS firewall on ASR routers?
Thanks a lot

Upgrading router from 2811 (IOS 12.4) to 4331 (IOS 15.2).

Hello all. I hope you will help me with this as I've put more time in to this project than I care to admit. Please? The last big problem that I resolved was that in IOS 12.4 "established" connections were allowed automatically in the ACL for the outside interface. In 15.2 you have to specify an permit statement in the ACL to allow established connections so if you are on a host, device or nat pool trying to open up a web page it would allow the connection to come back in on whatever port it was going out on. But I digress. My current issue is this.
First the configs are for the most part identical between the two devices. The problem is that from any host on the inside network on the 2811 if I tracert or ping mail.mycompany.com it resolves to the private IP and not the public IP. On the tracert I don't even hit the router as a hop as my first hop is the host of the private ip. If I go in to the server room and swap the ethernet cables from the 2811 interfaces to the 4331 interfaces and try to do the same thing I end up going to the public IP. So the first hop is the internal interface, second hop is a third party IP address (Meaning it's not my outside interface or a public IP I own. It would be the IP my outside interface communicates with.) Third hop times out and the 4th hop resolves to the correct "Public" IP but I get the various DNS names pointing at that public IP. Like mail.mycompany.com or mail.myothercompany.com or vpn.myotherothercompany.com etc... even though I pinged or tracert something different than the hostname returned.
The problem with this is that we've been running on the 2811 for almost 10 years now. And in that time we have various programs that run on various servers or client computers that reference hostnames or public IP's. Like our mailserver for example. Which is all well and good. But on the 4331 Router it routes it out and thus either a external IP or Natpool IP is used as the source IP when it comes back in, creating all sorts of problems for us.
So I'm wondering if anyone has any ideas what has changed or where I might look to find some answers on this. Because I am not finding it and I've spent hours searching and reading. If you need the configs or more information let me know. It would not take long for me to strip out sensitive information from them and post them here.
Thanks!

Jon, thank you so much for your reply, I'll try to explain my situation better. First I'm running either the 2811 or the 4331. As the 4331 will replace the 2811. There are no other router devices or layer 3 devices in this process and all hardware and configurations are identical. The only thing that is changing is the router being the 2811 or the 4331.
On the 2811 we have a mail/web server that is NAT'ed. From any computer or server on the inside network if I do a tracert or ping to the hostname it resolves to the private ip. Forexample:
ping mail.mycompany.com resolves to 192.168.1.4
tracert mail.mycompany.com routes to 192.168.1.4 as the first hop.
now if I switch to the 4331 and do that from the same computer I get this.
ping mail.mycompany.com resolves to 204.204.204.4
tracert mail.mycompany.com routes to
192.168.1.1 (LAN IP of the router)
204.204.10.1
* * * Request Timed Out. (I think I need to add a rule to the ACL for external interface inbound access-group, as this resolves on the 2811 when I tracert to the IP (not the hostname))
204.204.204.4
We have applications and processes that point to mail.mycompany.com that run from inside the network that are either taking a NAT'ed IP or using the NAT Pool on the 4331. This is problematic for us as we have rules defined on the mail server of what IP sources we allow to send or relay.
The ACL's are identical on both devices, other than me adding the permit for any, public ip range, for established connections. Other than that one addition, they are identical. Interfaces are identical, IP route statements are identical, IP Name-Servers are identical. IP NAT is identical.
Does that help? I could post the configs if you want to see them. But the ACL is rather long and there are some settings in the 2811 that were configured once upon a time for certain interfaces that no longer exist like inspection and class mapping or something that I did not carry over since they are not used. I have had 2 personal friends of mine who are versed in older cisco technology (IOS 10-12) look at the configs and not find any particular reason for my issue. And when I say looked, I mean we spent 4-5 hours going over the config and stripping it down and rebuilding it, running bare minimum config, etc... trying to identify and resolve some of the issues we are seeing between IOS 12.4 and IOS 15.2 in migrating the config.
I hope this helps, thanks!

Router 876 and IOS 12.3 (8) YI2

Similar Messages

Maybe you are looking for